otpless_headless_flutter 3.1.0

Standalone SDK for Otpless Headless functionality.

3.1.0 (5th October 2026)

Features

• Swift Package Manager support. The iOS side now ships ios/otpless_headless_flutter/Package.swift, so apps that have migrated to SPM can use this plugin. Flutter does not fall back to CocoaPods for plugins without a Swift package, so on SPM-migrated projects the previous releases could not be integrated at all.
• CocoaPods remains fully supported. The podspec and the Swift package build the same sources, so no action is needed if your app still uses CocoaPods.

Changes

• iOS sources moved from ios/Classes/ to ios/otpless_headless_flutter/Sources/otpless_headless_flutter/ (the layout SPM requires). s.source_files in the podspec was repointed at the same directory.
• The Objective-C registration shim (ios/Classes/OtplessFlutterHeadless.{h,m}) was removed: SwiftPM does not accept Objective-C and Swift sources in one target, and the shim relied on the CocoaPods-generated -Swift.h umbrella header, which does not exist under SPM. The Swift class SwiftOtplessFlutterHeadless is renamed to OtplessFlutterHeadless and is now the plugin class directly, so pluginClass is unchanged and registration is unaffected on both build systems.
• WhatsAppHandler.swift now imports Flutter explicitly. It previously picked FlutterResult up implicitly through the Objective-C umbrella header.
• Package.swift declares the FlutterFramework dependency required by Flutter's plugin template. Verified end-to-end on Flutter 3.47.6 / Xcode 26.6: the example app runs on an iOS simulator with the plugin and OtplessBM linked through SwiftPM rather than CocoaPods.

Known limitations

• Under SPM the plugin depends on the whole OtplessBM product, because Swift packages have no equivalent of the OtplessBM/Core subspec. The OtplessBM/GoogleSupport and OtplessBM/FacebookSupport subspecs have no SPM equivalent: if you use OtplessChannelType.GOOGLE_SDK or FACEBOOK_SDK on an SPM project, add the Google or Facebook SDK to your app directly. CocoaPods users are unaffected.

Native SDK versions are unchanged: Android otpless-headless-sdk 2.0.1, iOS OtplessBM 3.0.1.

3.0.1 (22nd September 2026)

Changes

• iOS: bump OtplessBM/Core 3.0.0 → 3.0.1.
• iOS: the podspec s.version is now 3.0.1, matching pubspec.yaml. The 3.0.0 release published a podspec whose s.version and OtplessBM/Core pin were both 3.0.0; the 3.0.0 entry below has been corrected to reflect what actually shipped.
• The wrapper-attribution token follows the bump: telemetry now reports platform = "otpless-headless-sdk(flutter-android-3.0.1)" on Android and platform = "otpless-headless(flutter-ios-3.0.1)" on iOS.

No Dart API changes. Android otpless-headless-sdk stays at 2.0.1.

3.0.0 (21st September 2026)

Breaking

• initialize(..., timeout:) has been removed. It was never read by either native SDK and was not sent over the method channel; drop timeout: from your call site.

Features

• initialize(appId, sslPinning: OtplessSslPinning.enabled) opts in to SSL certificate pinning of the OTPLESS backend on both Android and iOS. Default is OtplessSslPinning.disabled, so existing integrations are unchanged. When enabled and validation fails, the SDK fails closed and the response callback receives responseType: "FAILED", statusCode: 5004, response: {"errorCode": "5004", "errorMessage": "SSL pin validation failed"}; no auth request leaves the device.
• initialize(appId, loginUri: ...) is now honoured on both platforms (it was previously impossible to set from Dart).
• Android: Google Play Integrity attestation ships inside otpless-headless-sdk 2.0.1. It is internal to the SDK and needs no plugin API.

Changes

• Android: bump otpless-headless-sdk 0.9.0 → 2.0.1.
• iOS: bump OtplessBM/Core 2.3.2 → 3.0.0; production host is now sigma.otpless.app.
• iOS: the response delegate is bound inside initialize (parity with Android), so a FAILED emitted before setResponseCallback is no longer dropped.
• Dart: the response-callback dispatcher is null-safe; a native event arriving before setResponseCallback no longer throws.
• Podspec s.version now tracks pubspec.yaml (was stuck at 0.0.1).
• Wrapper attribution: the plugin now declares itself to the native SDKs at initialize, so backend telemetry attributes the session to the Flutter wrapper rather than to a plain native integration. The device event reports platform = "otpless-headless-sdk(flutter-android-3.0.0)" on Android and platform = "otpless-headless(flutter-ios-3.0.0)" on iOS.
• The attribution token embeds this plugin's own version, so telemetry distinguishes both the platform and the plugin release that produced a session. It is computed in Dart from a single internal constant kept in lock-step with pubspec.yaml (a unit test fails the build if the two drift); the Kotlin and Swift bridges only forward it. It is not merchant-facing: no new Dart parameter, and the only change to the initialize method-channel payload is the internal buildPlatform key.

2.0.0 (27th July 2026)

Breaking

• Renamed startBackground(callback, config) → startOnetap(callback, config). Update all Dart call sites. See README migration section.
• Response type set grew: consumers may now receive AUTH_TERMINATED, MFA_FACTOR_COMPLETED, and (Android only) AUTO_FLOW_ACTION from the response callback.
• Toolchain: Android consumers need Android Gradle Plugin 8.9.1+ and compileSdkVersion 36+ (transitive AndroidX requirement of otpless-headless-sdk:0.9.0).

Android

• Bump otpless-headless-sdk to v0.9.0.
• New public APIs: setMfaEnabled, initSession, getActiveSession, logoutSession, startInBackground, checkSimBindingStatus, clearSimBinding, setSimBindingEnabled, closeDialogIfOpen.
• Request-parser hardening: guards against unknown channels and empty-string setters; now accepts code, extras, requestId, deviceFingerprintMode on the start / startInBackground request map.

iOS

• Bump OtplessBM/Core to 2.3.2.
• startOnetap, sendUserAuthEvent now execute on iOS (were previously no-ops).
• New public APIs mirroring Android: setMfaEnabled, initSession, getActiveSession, logoutSession.

1.1.1 (19th Jun 2026)

iOS

• [fix] SceneDelegate support in initialize root VC lookup

1.1.0 (12th Feb 2026)

Android

• [fix] security exception and mutex fix
• [fix] android sdk update 0.6.6

1.0.9 (5th Feb 2026)

iOS

• [fix] OtplessBM updated to 2.0.8 for actor fix

1.0.8 (2nd Feb 2026)

iOS

• [feat] Airtel and Vi Support

1.0.7 (28th Jan 2026)

Andriod

• [fix] Truecaller initialization switched to io thread

1.0.6 (15th Jan 2026)

Android

• Update otpless-headless-sdk to v0.6.3
• Passkey support
• Background auth support
• Airtel and Vi support

1.0.5 (28th November 2025)

Android

• Update otpless-headless-sdk to v0.3.8
• Update Truecaller low memory fix

1.0.4 (29th August 2025)

Android

• Updated otpless-headless-sdk to v0.3.4
• isSdkReady support

iOS

• Updated OtplessBM to v2.0.0
• isSdkReady support

1.0.3 (16th July 2025)

Android

• Updated otpless-headless-sdk to v0.3.1
• Added support for SNA only mode

iOS

• Updated OtplessBM to v1.1.7
• Added support for SNA only mode

1.0.2 (3rd July 2025)

Feature

• truecaller support
• android sdk update to 0.3.0
• ios sdk update to 1.1.6

1.0.1 (16th April 2025)

Fixes

• Fixed incorrect plugin channel name issue.

1.0.0 (8th April 2025)

• First release of Flutter Headless SDK